Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
File: Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft (raw, json)
Hash identifier: WbiKJVwbcOQSmcLHd0pp4qzLh/Vi9suvWUN8AQL90sE=
Subject key identifier: 63:05:0B:DD:AD:06:38:D5:29:D4:C6:86:43:36:26:13:64:0C:13:2C
Authority key identifier: 66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
Certificate issuer: /CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Certificate serial: 01965493293C2AFBDFE93CE102AE38BA6A56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
Manifest number: 131B
Signing time: Sun 20 Apr 2025 19:00:52 +0000
Manifest this update: Sun 20 Apr 2025 19:00:52 +0000
Manifest next update: Mon 21 Apr 2025 19:00:52 +0000
Files and hashes: 1: Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl (hash: bO18Z5MW+gxSAKrIUDn76t6vehrkvNLd5Ggsm2NTPjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:54:93:29:3c:2a:fb:df:e9:3c:e1:02:ae:38:ba:6a:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=662fbf09ae6886ec7dd586b4a34b1dc9737e877d
Validity
Not Before: Apr 20 19:00:52 2025 GMT
Not After : Apr 21 19:00:52 2025 GMT
Subject: CN=63050bddad0638d529d4c68643362613640c132c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7c:25:2c:58:46:e2:99:39:3f:d8:a8:0c:24:
f9:ce:2e:7c:21:be:21:61:75:7c:81:fa:19:65:e3:
1c:a4:84:d6:83:75:b0:0a:bc:86:b3:74:9d:03:21:
53:4d:39:3b:ac:3e:9d:4c:44:84:8c:20:a1:d5:86:
e6:d5:ed:50:c1:2f:56:c0:fd:04:a4:da:b0:b1:79:
8f:19:08:0d:f3:09:d7:6a:35:a0:ad:c4:d0:c0:f0:
af:f7:c8:9d:cc:4e:52:86:8f:0c:1c:a1:58:1e:de:
78:dc:4d:44:f9:0e:e6:21:71:f6:08:60:75:85:2b:
78:6e:b1:7e:3f:de:2c:f9:44:4b:d7:4c:3c:95:00:
38:ed:c5:da:78:7c:b6:b3:b7:d3:2a:09:d3:ce:16:
2c:85:7b:e8:cb:1f:40:de:5d:c8:d4:98:23:8f:f7:
a5:f4:bb:31:b0:1d:9f:4a:fe:09:b7:5e:8a:f5:d2:
5e:d4:05:26:15:22:4f:79:7f:c6:e5:8b:52:b5:b3:
ed:f7:72:8c:ca:04:7d:8d:d3:ae:c5:dc:33:dc:6f:
3a:4c:2a:a7:13:58:3a:8d:fb:39:ce:1d:11:8c:df:
d2:61:86:05:8b:f0:b5:b3:86:f3:32:b1:bb:d2:e0:
72:86:8c:aa:07:01:63:b3:ae:cf:82:90:bf:31:44:
d5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:05:0B:DD:AD:06:38:D5:29:D4:C6:86:43:36:26:13:64:0C:13:2C
X509v3 Authority Key Identifier:
keyid:66:2F:BF:09:AE:68:86:EC:7D:D5:86:B4:A3:4B:1D:C9:73:7E:87:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zi-_Ca5ohux91Ya0o0sdyXN-h30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/aeb43e-0287-419c-aa55-1c668ff57873/1/Zi-_Ca5ohux91Ya0o0sdyXN-h30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e8:49:d8:82:b9:3c:6a:7b:75:09:d4:eb:3c:00:83:90:ec:
e6:b2:7c:bc:fe:bd:2d:32:e9:eb:49:2b:ec:cc:90:3f:f2:1e:
5a:f7:95:0b:fa:20:70:bd:fe:98:08:45:d7:1a:65:40:7d:d4:
a9:73:e7:44:16:f1:bb:d3:05:54:58:22:61:2d:0f:76:61:e0:
99:12:43:61:3c:2f:79:d5:4d:7a:05:fd:50:59:93:20:0c:67:
00:0f:78:63:09:0e:6e:60:e8:80:85:7d:5a:83:0f:8b:41:54:
3a:b2:d2:6b:32:b1:a1:24:ec:d5:a0:fa:97:45:69:b0:54:94:
43:84:1f:98:8e:85:b2:06:b1:d1:1b:e7:c6:96:dc:4f:b9:18:
02:ee:6a:c0:32:76:82:e5:7a:c9:c0:47:b8:5f:57:ad:c4:37:
50:e6:4f:81:e4:68:2f:6b:cb:0f:1d:42:9e:70:ad:14:df:1f:
c2:77:49:f1:1b:6d:0e:1a:3e:ec:43:9c:81:8c:c8:f2:14:89:
71:fe:d0:02:f8:27:18:b4:15:fd:9b:04:88:57:8c:d5:82:7a:
07:9b:b6:11:b0:d0:d6:5f:03:c4:6a:c7:cd:b4:f1:1d:d5:23:
87:96:70:11:0b:86:52:37:98:e0:44:6f:83:5d:5d:7b:3f:8c:
ba:31:f1:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZUkyk8Kvvf6TzhAq44umpWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2MmZiZjA5YWU2ODg2ZWM3ZGQ1ODZiNGEzNGIxZGM5NzM3
ZTg3N2QwHhcNMjUwNDIwMTkwMDUyWhcNMjUwNDIxMTkwMDUyWjAzMTEwLwYDVQQD
Eyg2MzA1MGJkZGFkMDYzOGQ1MjlkNGM2ODY0MzM2MjYxMzY0MGMxMzJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHwlLFhG4pk5P9ioDCT5zi58Ib4h
YXV8gfoZZeMcpITWg3WwCryGs3SdAyFTTTk7rD6dTESEjCCh1Ybm1e1QwS9WwP0E
pNqwsXmPGQgN8wnXajWgrcTQwPCv98idzE5Sho8MHKFYHt543E1E+Q7mIXH2CGB1
hSt4brF+P94s+URL10w8lQA47cXaeHy2s7fTKgnTzhYshXvoyx9A3l3I1Jgjj/el
9LsxsB2fSv4Jt16K9dJe1AUmFSJPeX/G5YtStbPt93KMygR9jdOuxdwz3G86TCqn
E1g6jfs5zh0RjN/SYYYFi/C1s4bzMrG70uByhoyqBwFjs67PgpC/MUTVPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGMFC92tBjjVKdTGhkM2JhNkDBMsMB8GA1UdIwQY
MBaAFGYvvwmuaIbsfdWGtKNLHclzfod9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmktX0NhNW9odXg5MVlhMG8wc2R5WE4taDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hZWI0M2UtMDI4Ny00MTljLWFhNTUt
MWM2NjhmZjU3ODczLzEvWmktX0NhNW9odXg5MVlhMG8wc2R5WE4taDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hZWI0M2UtMDI4Ny00MTljLWFhNTUtMWM2NjhmZjU3ODcz
LzEvWmktX0NhNW9odXg5MVlhMG8wc2R5WE4taDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATehJ2IK5
PGp7dQnU6zwAg5Ds5rJ8vP69LTLp60kr7MyQP/IeWveVC/ogcL3+mAhF1xplQH3U
qXPnRBbxu9MFVFgiYS0PdmHgmRJDYTwvedVNegX9UFmTIAxnAA94YwkObmDogIV9
WoMPi0FUOrLSazKxoSTs1aD6l0VpsFSUQ4QfmI6Fsgax0RvnxpbcT7kYAu5qwDJ2
guV6ycBHuF9XrcQ3UOZPgeRoL2vLDx1CnnCtFN8fwndJ8RttDho+7EOcgYzI8hSJ
cf7QAvgnGLQV/ZsEiFeM1YJ6B5u2EbDQ1l8DxGrHzbTxHdUjh5ZwEQuGUjeY4ERv
g11dez+MujHxpA==
-----END CERTIFICATE-----
Generated at Mon Apr 21 05:36:17 2025 by rpki-client